426355 matches found
EUVD-2026-72538
Improper Encoding or Escaping of Output vulnerability in ash-project ashauthenticationoauth2server allows an unauthenticated attacker to inject arbitrary authentication parameters into the WWW-Authenticate challenge header. BearerPlug and RequireScopePlug built the Bearer resourcemetadata="..."...
CVE-2026-33234
How I Turned AutoGPT's Email Feature Into an Internal Network Scanner CVE-2026-33234 | Moderate 5.0 | GHSA-4jwj-6mg5-wrwf Author: Pavan Nallamothu I was mapping every user-controlled input that touched the network in AutoGPT Platform. The HTTP layer was locked down tight. Private IP ranges...
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-0865 DESCRIPTION: User-controlled header names and values containing newlines can allow injecting HTTP headers. CWE:CWE-74: Improper Neutralization of...
radare2 v6.2.2
Radare2: Libre Reversing Framework for Unix Geeks Current git master branch is 6.2.2, next release will be 6.2.4. Description r2 is a complete rewrite of radare. It provides a set of libraries, tools and plugins to ease reverse engineering tasks. Distributed under LGPLv3, despite each plugin can...
skyjack
SkyJack SkyJack ๆฏไธๆฌพ่ชไธปๆๅฏปใๅ ฅไพตๅนถๆ ็บฟๅฎๅ จๆงๅถๅ ถไปๆ ไบบๆบ็ๅทฅ็จๆ ไบบๆบ๏ผๆ ่ฎบ่ฟไบๆ ไบบๆบๅจๆ ็บฟ่ๅด่ฟๆฏ้ฃ่ก่ๅดๅ ๏ผ้ฝ่ฝๅฐๅ ถๅๆๅไฝ ๆงๅถ็ๅตๅฐธๆ ไบบๆบๅคงๅใ ๆดๆฐ๏ผ SkyJack for 3D Robotics ๆ ไบบๆบ ๆฆๅฟต้ช่ฏ๏ผไฝฟ็จ TI CC1111 ่ฏ็็ป 2015ๅนด8ๆ ่ฏฅๆดๆฐไฝฟ็จ sub-GHz ๅฐ้ขๆถๅๅจๆฅ้ขๆต 3DR ้ฅๆตๆจกๅ็่ทณ้ขๆจกๅผไธ ID๏ผๅฎ็ฐๅฏน้่ฟๆ ไบบๆบ็ๅฎๅ จ่ฟ็จๆฅ็ฎก๏ผไธ Parrot ๆปๅป็ฑปไผผ๏ผๆ ้ Wi-Fi๏ผใ ไฝ่ @SamyKamkar // [email protected] // http://samy.pl //...
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-39883 DESCRIPTION: OpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.15.0 to 1.42.0, the fix for CVE-2026-24051 changed the Darwin iore...
rpef
่ทฏ็ฑๅจๅๆธ้ๆกๆถ ็ฎๅ๏ผ่ฏฅๆกๆถๅ ๅซ่ฅๅนฒๅบไปถ้ๅๆจกๅ๏ผ root@kitploit: 'Verified' - ่ฏฅๆจกๅๅทฒ็กฎ่ฎคๅฏๆญฃๅธธๅทฅไฝ๏ผไธ็ถๆ็จณๅฎใ 'Unverified' - ่ฏฅๆจกๅ้ข่ฎก่ฝๅค่ฟ่ก๏ผๆๅช้ๅฐ้้ขๅคๅทฅไฝๅณๅฏ่ฟ่ก๏ผ ไฝๅฐๅพ ๅจๅฎ้ ่ฎพๅคไธ่ฟ่กๆต่ฏใ 'Testing' - ่ฏฅๆจกๅ็ฎๅไปๅจๅผๅไธญ๏ผๆๆถไธ็จณๅฎใ็จๆทๅบๅฐๅ ถ่งไธบ โ่ฟ่กไธญ็ๅทฅไฝโใ 'Roadblock' - ็ฎๅๅญๅจไธไบ้ป็ข๏ผๅฏผ่ด่ฏฅๆจกๅ็่ฟๅฑๆๆถๅๆปใๅฏ่ฝ้่ฆ ๆไบๆ ๆณ่ทๅ็ๅฎ็จๅทฅๅ ท๏ผๆ้่ฆๅผๅฑๅคง้้ๅๅทฅ็จๅทฅไฝใ ๅฆ้ๆฅ็ๅฏ็จ้้กนๅ่กจ๏ผ่ฏท่ฟ่ก๏ผ root@kitploit: ./rpef.py -h...
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-42960 DESCRIPTION: NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to poisoning via promiscuous records for the authority section...
Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201
Glass Cage: Zero-Click PNG Exploit Chain for iOS 18.2.1 CVE-2025-43300: O.o.B Wrrite in ImageIO CVE-2025-24201: WebKit Remote Code Execution CVE-2025-24085: Core Media Privilege Escalation Patched: Jan-March 2025 Tested On: iPhone 14 Pro Max iOS 18.2.1 VirusTotal Analysis Verified Hash Summary...
Scanner_CVE_2026-42945
Scanner for detecting Nginx instances vulnerable to CVE-2026-42945 NGINX RIFT. Accepts individual IPs, CIDR ranges, and ASNs as input. About CVE-2026-42945 affects all Nginx versions prior to 1.30.1. The tool probes HTTP and HTTPS on default ports, reads the Server header from the response, and...
CVE-2026-24061
CVE-2026-24061 GNU inetutils-telnetd - Remote Authentication Bypass A security research tool for exploiting CVE-2026-24061, a critical remote authentication bypass vulnerability in GNU inetutils-telnetd that allows instant root shell access without authentication. Table of Contents Vulnerability...
CVE-2020-25042-PoC
CVE-2020-25042-PoC Proof-of-concept for CVE-2020-25042, an authenticated arbitrary file upload issue in Mara CMS 7.5 that can lead to remote code execution. The script logs in with a valid Mara CMS admin/manager account, uploads a PHP payload through codebase/handler.php, and executes commands...
CLSA-2026-1788814705 TuxCare security update for org.springframework (8 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 8 CVEs. Fixed in 5.3.25-tuxcare.9...
CLSA-2026-1788813738 TuxCare security update for org.springframework (8 CVEs)
TuxCare rebuilt 22 org.springframework packages to address 8 CVEs. Fixed in 5.0.13.RELEASE-tuxcare.5...
CVE-2026-75650
creationtimestamp| type| source ---|---|--- 2026-09-07 20:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117231650321650010 2026-09-07 20:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3muxdyiw3nj2z 2026-09-07 21:35:40+00:00| seen|...
BrowserBox v18.8.0
BrowserBox by DOSAYGO Secure, modern Remote Browser Isolation RBI with a clientless experience ๐ NEW in v18.0.1 โ Passkey authentication on macOS: sign in to websites with real passkeys inside your remote browser. Passkeys are created and stored on your Mac's Secure Enclave and unlocked with Touc...
Injection-vulnerability-in-Paradox-Security-Systems-IPR512-CVE-2023-24709-PoC
Injection vulnerability in Paradox Security Systems IPR512 - CVE-2023-24709 PoC In Paradox Security System IPR512 Web console login form page, attacker can input JavaScript string, such as that will overwrite configurations in the file "login.xml" and cause the login form to crash and make it...
vuln-list
vuln-list ่ชๅจๆถ้ๆผๆดไฟกๆฏๅนถๅฐๅ ถไฟๅญไธบๅฏ่งฃๆๆ ผๅผ ๆฅๆบ ็ฎๅฝ| ๆไฝ็ณป็ป| ๆฅๆบ| URL ---|---|---|--- alma/| AlmaLinux| AlmaLinux Errata| https://errata.almalinux.org/8/errata.json alpine/| Alpine Linux| Alpine secdb| https://secdb.alpinelinux.org/ amazon/1| Amazon Linux| Amazon Linux Security Center| https://alas.aws.amazon.com/...
cve-2019-2215-markw
Bad Binder for markw !CAUTION Everything you do is at your own risk. I am not responsible for your broken device. Adapted with Deepseek V4 Flash Made for the latest Global MIUI 10. Overview Main goal: Get temp root on latest official miui Root can be used for flashing custom abootwhich is what I...
